Resubmissions
24-08-2024 12:49
240824-p2fzgasell 7General
-
Target
selfbot.exe
-
Size
10.9MB
-
MD5
8f51259600abf7ad700d70848f36216b
-
SHA1
0645ea6cdd98dbc77e376dc2c58dcfb93f83b0e1
-
SHA256
996853d821d6c52826b7c0c57808a8a4df548196a7fc404a17b726439db929fd
-
SHA512
0ef667145859ac6e410a71695bf4b6ffc4f0d7b3419a4de3c44993bfa038188f16cee5f0afc11c01689372b2644b14de23cb915db74f30970889a2c2043f5fb3
-
SSDEEP
196608:QP3PbRSk9Esu5oahDeGZ691nWDWoMBqav9CYePhr4iF+J2Igbgm4DsAqOc1B+:S/bRZ93uCahDe51WD1MBbFChhEigJ2IV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource selfbot.exe
Files
-
selfbot.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 28.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10.9MB - Virtual size: 10.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE